cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — إلغاء الإشارة إلى مؤشر NULL في OPENTER الخاص بـ mrubyc إثبات مفهوم مستقل لـ CVE-2026-86547 ، وهو إلغاء الإشارة إلى مؤشر NULL في معالج openter الخاص بـ mrubyc حتى الإصدار 4.0.0. الملخص mrubyc هو تطبيق خفيف الوزن للغة Ruby مخصص للأنظمة المدمجة. تحتفظ آلة البايت كود الافتراضية الخاص...

joniles__mpxj_CVE-2020-35460_8-3-4

MPXJ مرحبًا بك في MPXJ! توفر هذه المكتبة مجموعة من الأدوات التي تسمح بمعالجة معلومات المشاريع في Java و.NET وRuby ولغات أخرى. يمكن العثور على الوثائق الكاملة بما في ذلك ملاحظات الإصدار عبر الإنترنت على http://mpxj.org...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails में Action Pack, 3.2.22.2 से पहले, 4.x 4.1.14.2 से पहले, और 4.2.x 4.2.5.2 से पहले के संस्करणों में, दूरस्थ हमलावरों को render विधि के अनियंत्रित उपयोग का लाभ उठाकर मनमाना Ruby कोड निष्पादित करने की अनुमति देता है। वर्ग इनपुट सत्यापन त्रुटि क्रेडिट Tobias Kraze makandra...

cve-2014-0130

حالة اختبار CVE-2014-0130 الحمولة : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === تم الكشف بواسطة Netsparker : https://i.imgur.com/s1vahmj.png == HackerOne 1 - ثغرة اجتياز الدليل في rails على newrelic.com بواسطة droidsec - https://hackerone.com/reports/134032 == المراجع 1...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix Ruby के big decimal लाइब्रेरी में एक segfault बग है जिसे उपयोगकर्ता ज्ञात खराब मान प्रदान करके ट्रिगर कर सकते हैं। यदि आप जाँचना चाहते हैं कि आपका एप्लिकेशन सुरक्षित है या नहीं, तो +example.rb+ चलाएँ। यह स्क्रिप्ट सामान्य रूप से बाहर निकलनी चाहिए, segfault नहीं होना...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails में Action Pack, 3.2.22.2 से पहले, 4.x में 4.1.14.2 से पहले, और 4.2.x में 4.2.5.2 से पहले, रिमोट हमलावरों को एप्लिकेशन के render विधि के अप्रतिबंधित उपयोग का लाभ उठाकर मनमाना Ruby कोड निष्पादित करने की अनुमति देता है। संसाधन https://vulners.com/cve/CVE-2016-2098 उपयोग ...

[SECURITY] Fedora 45 Update: rubygem-nokogiri-1.19.4-5.fc45

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath...

Linux Distros Unpatched Vulnerability : CVE-2026-94656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

Linux Distros Unpatched Vulnerability : CVE-2026-96277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0...

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

GHSA-MWM8-39RW-8826 sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby الوصف Snorby هو تطبيق ويب مبني على Ruby on Rails لمراقبة أمن الشبكات، ويتفاعل مع أنظمة كشف التسلل الشائعة حاليًا Snort وSuricata وSagan. تتمثل المفاهيم الأساسية الكامنة وراء Snorb...

CVE-2026-96277

A flaw was found in the Apache Thrift Ruby bindings. This vulnerability allows a remote attacker to cause a Denial of Service DoS due to improper handling of exceptional conditions. By triggering an uncaught exception, an attacker can crash the service and disrupt availability...

AZL-105929 CVE-2026-96277 affecting package thrift 0.24.0-1

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-105932 CVE-2026-94656 affecting package thrift 0.24.0-1

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

UBUNTU-CVE-2026-94656

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...